Over 80% of workers use unapproved AI tools. Learn how shadow AI creates hidden attack surface and what security teams can do to detect and address it.

The post Shadow AI: How Unsanctioned Tools Create Invisible Risk appeared first on OffSec.

Announcing a strategic partnership with Deloitte Portugal to help organizations strengthen the technical capabilities of their security teams.

The post OffSec and Deloitte Portugal Announces Strategic Partnership appeared first on OffSec.

Preparing for an OffSec certification exam is a technical and psychological journey. Here are some expert strategies to help during your OffSec exam prep!

The post 8 Ways to Stay Motivated During Exam Prep appeared first on OffSec.

OSCP holders already have the adversarial mindset AI red teaming demands. Learn what transfers, what's new, and how to close the gap from OSCP to OSAI efficiently.

The post OSCP to OSAI: How Offensive Security Practitioners Can Pivot Into AI Security appeared first on OffSec.

The AI security skills gap threatens enterprise AI investments. Learn where skills gaps exist across security teams and how hands-on training closes them.

The post The AI Security Skills Gap: What It Is, Where It Exists, and How to Close It appeared first on OffSec.

At OffSec, we are building OSAI, our offensive AI security certification, to help practitioners extend adversary-driven methodology into AI-enabled environments already entering production. That initiative reflects a broader shift happening across the industry. As AI-enabled features move into production systems, customer platforms, and internal operations, organizations are recognizing that these capabilities expand the attack surface

The post Careers in Offensive AI Security: Roles, Skills, and Pathways appeared first on OffSec.

A practical framework for security leaders to build AI-ready teams. Learn to assess capabilities, prioritize training, and balance AI with foundational skills.

The post Building an AI-Ready Cybersecurity Team appeared first on OffSec.

Before tools, before frameworks, before hype, offensive security has always been about one thing: Thinking like an attacker. That foundation now defines the offensive AI security skills practitioners will need as AI reshapes the attack surface. AI systems introduce new behaviors and new failure modes, but the core mindset remains the same: understand how a

The post The Skills That Will Matter for Offensive AI Security in 2026 appeared first on OffSec.

AI-powered cyber attacks are outpacing traditional defenses. Learn the four key threat categories and the new skills blue teams need to defend against them.

The post Defending Against AI-Powered Cyber Attacks: Why Your Blue Team Needs New Skills appeared first on OffSec.

CVE-2026-24061 enables unauthenticated attackers to exploit GNU telnetd and gain immediate root shells over the network.

The post CVE-2026-24061 – GNU InetUtils telnetd Authentication Bypass Vulnerability appeared first on OffSec.

In September 2025, security researchers at Anthropic uncovered something unprecedented: an AI-orchestrated espionage campaign where attackers used Claude to perform 80–90% of a sophisticated hacking operation. The AI handled everything from reconnaissance to payload development, demonstrating that artificial intelligence has fundamentally changed the threat landscape, not just as a tool for defenders, but as both

The post Thinking Like an Attacker: How Attackers Target AI Systems appeared first on OffSec.

LLMs change how red teams test applications. Explore OffSec’s LLM Red Teaming Learning Path and build practical AI testing skills.

The post Offensive Security in the Age of AI: Red Teaming LLM appeared first on OffSec.

To the OffSec community, As 2025 comes to a close, we want to pause and say thank you. Whether you trained with us, earned a certification, hired through our platform, or cheered others on from the sidelines, you helped make this year one of our most meaningful yet. This year, we focused on one goal:

The post Closing Out 2025 with Gratitude (and Momentum) appeared first on OffSec.

Discover 6 key benefits of a fully certified cybersecurity team, from faster onboarding to confident hiring. Learn how unified training drives performance.

The post 6 Benefits of a Fully Certified Cybersecurity Team appeared first on OffSec.

Discover why blue team defenders benefit from red team skills. Learn how offensive knowledge improves detection, incident response, and career growth.

The post Blue Team vs Red Team: Should Defenders Learn Offensive Skills? appeared first on OffSec.

As organizations deploy AI tools to improve detection accuracy, streamline investigations, and strengthen defenses, threat actors are leveraging the same technologies to develop more efficient and adaptive attack methods.  This article outlines the current and emerging roles of AI in cybersecurity, including its defensive applications, its misuse by attackers, and the new attack surfaces it

The post How Will AI Affect Cybersecurity? appeared first on OffSec.

Developing meaningful experience in the cybersecurity field is a common challenge for professionals who have already entered the industry and want to advance their cybersecurity skills.  As roles become more technical and responsibilities broaden, it becomes clear that foundational exposure alone is not enough. Employers expect practitioners to demonstrate practical capability, sound judgment, and the

The post How to Gain Experience in Cybersecurity appeared first on OffSec.

React Server Components promise less client-side JavaScript, but that convenience can hide serious risk. Learn how CVE-2025-55182 (CVSS 10.0) enables critical RCE in the RSC ecosystem, why it happened, and how the public exploit works against React’s server-side handling.

The post CVE-2025-55182 – React Server Components RCE via Flight Payload Deserialization appeared first on OffSec.

Transform enterprise cyber training with realistic cyber ranges. Move beyond generic courses to hands-on attack simulations in production-like environments.

The post Why Enterprises Are Moving from Generic Cyber Training to Cyber Ranges appeared first on OffSec.